$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/43a2d4b6-3f9d-30a4-b9cd-d44496d278e2.roa File: 43a2d4b6-3f9d-30a4-b9cd-d44496d278e2.roa (raw, json) Hash identifier: gt3gnB3K5rkNxzvUurVnEKGx8LRgv+07SaX84m3Uvhc= Subject key identifier: 95:E3:FA:7E:72:70:3C:83:4A:4A:CF:C5:5F:2B:D7:82:30:21:46:6E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A761B723664AF430B2824EB40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/43a2d4b6-3f9d-30a4-b9cd-d44496d278e2.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.31.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:72:36:64:af:43:0b:28:24:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=25c66116-4007-48f1-bafe-8ff4733c4206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:60:d7:22:5d:6c:86:71:7e:da:b8:d7:e0:08: 42:39:62:94:29:2f:b6:aa:d9:06:58:ad:ed:db:c6: 44:df:ba:76:b6:0f:fd:96:50:3e:c2:8c:85:2a:b7: bf:52:ee:36:ae:3d:2f:80:17:e3:74:39:18:0c:67: fa:df:97:7c:b0:5d:0c:ef:07:67:d9:a9:b5:c4:c3: e0:9e:7c:9c:8f:02:0f:6a:24:03:48:c9:fa:8b:53: 4c:0e:f8:18:ef:5e:83:ea:e9:60:8e:fc:eb:11:ec: 3c:cf:b9:51:26:d3:4e:fd:aa:5f:0b:54:c8:67:0b: f4:df:84:eb:5f:1f:b4:63:52:12:22:8b:ac:37:bd: e9:28:bb:5b:d9:3f:48:41:f4:2d:01:4c:bc:e8:e0: bc:b6:b8:e1:b1:60:07:76:b8:3a:68:7a:93:48:22: 53:d3:96:1e:00:b5:82:58:88:16:68:c0:19:e3:68: 34:aa:f4:9b:87:c1:d8:5f:4a:11:ae:8d:41:0a:6b: f6:15:6e:a6:50:1e:b0:00:f0:71:7e:28:fd:1d:90: 9e:41:99:03:b5:c7:6a:ca:39:fd:a8:da:8f:84:15: 3b:3f:a7:7e:44:55:48:65:20:04:96:62:10:ad:cd: 28:32:0d:3a:2e:96:2c:30:cd:b0:a3:53:f3:3a:4a: 0d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E3:FA:7E:72:70:3C:83:4A:4A:CF:C5:5F:2B:D7:82:30:21:46:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/43a2d4b6-3f9d-30a4-b9cd-d44496d278e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:99:c2:dc:98:7c:bd:ac:9b:3a:a6:b8:a2:51:4f:3e:c9:2d: d0:54:c3:af:b9:a4:7a:6b:36:c3:6d:40:42:0d:43:7d:e6:a7: 36:11:5d:f7:02:a3:f2:23:2d:5b:90:74:cc:65:d2:00:37:71: 09:e7:76:48:72:54:0a:e8:54:1b:92:dc:15:d9:e3:2d:43:85: ad:6f:a6:c5:5a:c4:10:13:e0:dd:0d:c2:ca:39:9d:f8:97:5b: ac:0f:2a:73:95:fb:06:50:8c:83:15:ec:28:67:78:3d:ad:ac: b3:25:94:1e:a3:96:bc:25:a1:41:b9:84:21:2c:d3:83:8d:4e: 81:8e:9d:f5:ab:72:a0:02:71:d9:92:07:e6:16:97:b0:01:3b: e2:60:3f:4a:52:cc:f9:e4:71:f3:44:c0:5f:8a:b3:0b:5b:0a: b1:ea:23:d9:a3:b0:8e:06:23:ab:9a:8b:4c:38:16:0e:3e:f8: 3a:69:3d:43:a8:62:86:d9:a7:7d:86:83:29:09:20:bf:e7:da: d4:b3:e9:ef:1a:b1:ab:a8:14:11:7d:b1:29:78:4e:d9:e8:d3: 40:9d:2e:1c:24:f2:50:6b:cf:90:d5:df:8b:a5:1b:d7:1a:47: a8:36:07:56:56:54:45:7d:f5:a7:8e:77:83:9c:60:aa:c0:77: 28:b8:90:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2G3I2ZK9DCygk60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk MjVjNjYxMTYtNDAwNy00OGYxLWJhZmUtOGZmNDczM2M0MjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2DXIl1shnF+2rjX4AhCOWKUKS+2qtkGWK3t 28ZE37p2tg/9llA+woyFKre/Uu42rj0vgBfjdDkYDGf635d8sF0M7wdn2am1xMPg nnycjwIPaiQDSMn6i1NMDvgY716D6ulgjvzrEew8z7lRJtNO/apfC1TIZwv034Tr Xx+0Y1ISIousN73pKLtb2T9IQfQtAUy86OC8trjhsWAHdrg6aHqTSCJT05YeALWC WIgWaMAZ42g0qvSbh8HYX0oRro1BCmv2FW6mUB6wAPBxfij9HZCeQZkDtcdqyjn9 qNqPhBU7P6d+RFVIZSAElmIQrc0oMg06LpYsMM2wo1PzOkoNhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXj+n5ycDyDSkrPxV8r14IwIUZuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDNhMmQ0YjYtM2Y5ZC0z MGE0LWI5Y2QtZDQ0NDk2ZDI3OGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6ZwtyYfL2smzqmuKJRTz7JLdBUw6+5pHprNsNtQEINQ33mpzYRXfcC o/IjLVuQdMxl0gA3cQnndkhyVAroVBuS3BXZ4y1Dha1vpsVaxBAT4N0Nwso5nfiX W6wPKnOV+wZQjIMV7ChneD2trLMllB6jlrwloUG5hCEs04ONToGOnfWrcqACcdmS B+YWl7ABO+JgP0pSzPnkcfNEwF+KswtbCrHqI9mjsI4GI6uai0w4Fg4++DppPUOo YobZp32GgykJIL/n2tSz6e8asauoFBF9sSl4Ttno00CdLhwk8lBrz5DV34ulG9ca R6g2B1ZWVEV99aeOd4OcYKrAdyi4kKY= -----END CERTIFICATE-----Generated at Thu Jul 10 06:33:52 2025 by rpki-client